Sophos Community
User
Site
Search
User
Toggle Mobile menu
Community & Product Forums
Blogs
Partners
Events & Webinars
Getting Started
Support Portal
Community Blogs
Application Control
Community
Product documentation
Security
Feedback
Support Portal
Product documentation
Products
Endpoint security
Sophos Endpoint
Sophos XDR
Device Encryption
Sophos Mobile
Network Security
Sophos Firewall
Sophos ZTNA
Sophos Switch
UTM Firewall
Sophos Wireless
Sophos NDR
Email Security
Sophos Email
Phish Threat
Cloud Security
Sophos Central
Sophos Cloud Optix
Support Tools
Sophos integrations
Free tools
AI Solutions
Sophos AI
Services
Management platform
Sophos Professional Services
Sophos Central
Support Portal
Sophos Community log in
Sophos Partners
Partners blog
Local Partner community
Partner news
Resources
MSP guides
Partner Care
Sophos Central
Webinars & Events
Webinars & Events
Calendar
Become a partner
Join our program
Events & Webinars
Events & Webinars
Calendar
Recordings
Getting started in the Community
How to get started
SophosID registration
How to set up your profile
How to contribute and participate
How to manage private messages
Member recognition
Recognition program
Leaderboard
Products and Services
Products
Endpoint security
Sophos Endpoint
Sophos XDR
Device Encryption
Sophos Mobile
Network Security
Sophos Firewall
ZTNA
Sophos Switch
UTM Firewall
Sophos Wireless
NDR
Email Security
Sophos Email
Phish Threat
Cloud Security
Sophos Central
Sophos Cloud Optix
Support Tools
Sophos integrations
Free tools
AI Solutions
Sophos AI
Services
Management platform
Sophos Professional Services
Sophos Central
Support Portal
Sophos Community log in
Blogs
Community Blogs
Application Control
Community
Product documentation
Security
Feedback
Support Portal
Product documentation
Partners
Sophos Partners
Partners blog
Local Partner community
Partner news
Resources
MSP guides
Partner Care
Sophos Central
Webinars & Events
Webinars & Events
Calendar
Become a partner
Join our program
Events & Webinars
Events & Webinars
Events & Webinars
Calendar
Recordings
Getting Started
Getting started in the Community
How to get started
SophosID registration
How to set up your profile
How to contribute and participate
How to manage private messages
Member recognition
Recognition program
Leaderboard
Support Portal
UTM Firewall
Network Protection: Firewall, NAT, QoS, & IPS
A good Firewall schema
Release Notes & News
Discussions
Recommended Reads
Members
Lifecycle and Migration
More
Cancel
New
UTM Firewall requires membership for participation - click to join
Thread Info
State
Not Answered
Locked
Locked
Replies
3 replies
Subscribers
2 subscribers
Views
1565 views
Users
0 members are here
Options
RSS
More
Cancel
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion
A good Firewall schema
FrApzZt_LanX
over 18 years ago
Hi,
how must i configure the package filter so that it is effectiv and that i can vnc from outside and ipsec over l2tp
cu
frapzzt
This thread was automatically locked due to age.
Parents
0
BarryG
over 18 years ago
You'll need to setup DNAT for each service, and packet filter rules to allow the traffic.
Barry
Cancel
Vote Up
0
Vote Down
Cancel
0
BanksDad
over 18 years ago
in reply to
BarryG
i beleive that DNAT comes before packet filter... so wouldnt that be redundant? unless there is another rule in place to explicitly reject or drop, i dont think any packet filter rule needs to be there. dnat should be fine.
Cancel
Vote Up
0
Vote Down
Cancel
0
BarryG
over 18 years ago
in reply to
BanksDad
DNAT won't work without corresponding PF rules.
Barry
Cancel
Vote Up
0
Vote Down
Cancel
Reply
0
BarryG
over 18 years ago
in reply to
BanksDad
DNAT won't work without corresponding PF rules.
Barry
Cancel
Vote Up
0
Vote Down
Cancel
Children
No Data